chore(agent): migrate to skills-based instruction system and extend roadmap#11
Merged
chore(agent): migrate to skills-based instruction system and extend roadmap#11
Conversation
- Introduce AGENTS.md as the single source of truth for all agents - Thin CLAUDE.md down to a one-line pointer to AGENTS.md - Replace flat commands/workflows with scoped skills and rules files - Overhaul .claude/settings.json: add permission allow/deny lists and JSON schema reference; remove the legacy PostToolUse hook Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Add Phase 4.5: SocialRecap domain — AI-generated weekly social posts reusing Phase 4.2 content aggregation and Phase 3 LLM summarization - Split Phase 6.3 into 6.3.1 share links (existing plan) and 6.3.2 crossposting via platform APIs (OAuth2, builds on Phase 4.4) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Enable import names (replace FQCNs with use statements) - Expand Rector paths to include config/, public/, migrations/ - Add SymfonySetList::ANNOTATIONS_TO_ATTRIBUTES and DoctrineSetList::DOCTRINE_ORM_300 rule sets - Apply yoda comparison style throughout - Normalize string concatenation (remove spaces around .) - Remove redundant PHP CS Fixer rules now handled by Rector Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Add .claude/hooks/guardrails.py: PostToolUse hook covering protected branch guard, instruction-file edit warning, phpstan.neon guard, env-file staging guard, sensitive surface reminder, async entrypoint reminder, and cross-stack staged-files reminder - Wire hook in settings.json for Bash, Edit, Write, and Read matchers - Use git rev-parse --show-toplevel for portable path resolution so the hook works from any subdirectory (e.g. frontend/) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Upgrade flatted, picomatch, vite, and transitive dependencies - Resolves: prototype pollution (flatted), ReDoS (picomatch), path traversal and file read bypass (vite) - npm audit now reports 0 vulnerabilities Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Scan prod Docker image for CRITICAL/HIGH CVEs (blocking) - Scan repository for IaC misconfigurations (blocking) - Mirrors the security gate already in place on insee-city-api Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Without this, post-install cache:clear boots Symfony in dev mode and tries to instantiate dev-only bundles (DoctrineFixturesBundle) that are not installed with --no-dev, causing the build to fail. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
cache:clear requires runtime env vars (DATABASE_URL, JWT keys) that are not available at image build time; use --no-scripts and defer cache warming to container startup. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
var/ is gitignored and --no-scripts skips cache:clear which would have created it; mkdir -p ensures the directory exists before chown. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
AGENTS.mdas the single source of truth for agent instructions (Claude Code + Codex share one file)CLAUDE.mddown to a one-line pointer toAGENTS.md.claude/commands/+.claude/workflows/with scoped skills, rules, and patterns files.claude/settings.json: add permission allow/deny lists, JSON schema reference, remove legacy PostToolUse hookTest plan
AGENTS.mdloads correctly in Claude Code and Codex sessions.claude/settings.jsonpermissions are respected🤖 Generated with Claude Code